Our commitments
HUDDLE is built to separate organizations and restrict actions by role. We do not sell personal data or private lead lists. This page explains the service’s data-handling approach; it is not a security certification, independent audit or a substitute for an Enterprise data-processing agreement.
Your organization’s control
Organization Owners and authorized administrators manage membership, branding and access. Members can manage their permitted profile fields. Customers must establish a lawful basis for the data they upload and the contacts they collect, give appropriate notices and respect withdrawal and deletion requests. Public card fields are deliberately shared and should be kept to professional information.
How we protect access
The application uses authenticated sessions, server-side permissions and organization checks for private operations. Sensitive platform administration requires separate elevated access and MFA. Credentials and authenticator secrets are protected, and private uploaded images are served through controlled application paths. Publicly published images and profile details remain accessible as part of the card experience.
Providers, incidents and requests
Hosting, storage and payment providers are identified in our Privacy Policy. We assess incidents, take appropriate containment steps and provide notifications where required by applicable law or contract. To report suspected exposure or request a data-processing agreement for Enterprise, email info@touchmarkdes.com. Do not send passwords, payment credentials or unnecessary personal information in a report.
Retention and deletion
We retain records according to their operational purpose and applicable obligations, rather than promising immediate deletion from every system. Verified deletion requests may require coordination with the customer organization and may be subject to legal retention, security logs and backup rotation. A downloaded contact or a recipient’s independent copy is outside HUDDLE’s direct control.